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Abstract — A generalized multiple access channel (GMAC) with 
one confidential message set is studied, where two users (users 1 
and 2) attempt to transmit common information to a destination, 
and user 1 also has confidential information intended for the 
destination. Moreover, user 1 wishes to keep its confidential 
information as secret as possible from user 2. A deterministic 
GMAC is first studied, and the capacity-equivocation region and 
the secrecy capacity region are obtained. Two main classes of the 
GMAC are then studied: the binary GMAC and the Gaussian 
GMAC. For both channels, the capacity-equivocation region and 
the secrecy capacity region are established. 

I. Introduction 

An important security issue in multi-terminal networks 
is the transmission of confidential information to legitimate 
destinations while keeping other nodes as ignorant of this 
information as possible. The secrecy level of a confiden- 
tial message at a nonlegitimate node (or a wire-tapper) is 
measured by the equivocation rate, i.e., the entropy rate of 
the confidential message conditioned on the channel outputs 
at this node. The secrecy capacity is the maximum rate at 
which the confidential message can be rehably transmitted 
to the intended destination with the wire-tapper obtaining no 
information. 

The secrecy capacity was established for a basic wire-tap 
channel by Wyner in [1], and for a more general model of the 
broadcast channel with confidential messages by Csiszar and 
Korner in [2]. The relay channel with confidential messages 
was studied in [3], where the secrecy rate was given. More 
recently, a generalized multiple access channel (GMAC) with 
confidential messages was studied in [4], where each user 
wishes to transmit a confidential message to a destination, and 
wishes to keep the other user as ignorant of its confidential 
message as possible. The secrecy rate region was given for the 
GMAC with two confidential message sets, and the secrecy 
capacity region was established for the GMAC with one con- 
fidential message set. Other work on multiple access channels 
with confidential messages can be found in [5], [6]. 

In this paper, we focus on the GMAC with one confidential 
message set, where the two users have a common message for 
the destination and only one user (user 1) has a confidential 
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message for the destination. We first study a simple determin- 
istic GMAC, and characterize the capacity-equivocation region 
and the secrecy capacity region. The focus of this paper is on 
the two main classes of GMACs: the binary GMAC and the 
Gaussian GMAC. For both channels, we establish the capacity- 
equivocation region and the secrecy capacity region explicitly. 

In this paper, we use .x" to indicate the vector {xi, . . . , x„), 
and use .x" to indicate the vector {xi, . . . , Throughout the 
paper, the logarithmic function is to the base 2. 

The organization of this paper is as follows. In Section 
nil we introduce the channel model of the GMAC with one 
confidential message set. In Section |lll] we present the secrecy 
capacity region of a simple deterministic GMAC with one 
confidential message set. In Section |IV] we present the secrecy 
capacity region for a binary GMAC model with one confi- 
dential message set. In Section |V] we focus on the Gaussian 
GMAC with one confidential message set, and present our 
results on the secrecy capacity region. 

II. Channel Model and Previous Results 

In this section, we first define the GMAC with one confi- 
dential message set, and then review the known results for this 
model. 

Definition 1: A discrete memoryless GMAC consists of 
two finite channel input alphabets Xi and X2, two finite 
channel output alphabets y and 3^2, and a transition probability 
distribution 2/2 1 2^1, 2:2) (see Fig. [D. where xi G Xi and 
X2 € X2 are channel inputs from users I and 2, respectively, 
and y G y and 1/2 G 3^2 are channel outputs at the destination 
and user 2, respectively. 

Definition 2: The GMAC with one confidential message set 
is physically degraded if the transition probability distribution 
satisfies 

p{y, y2\xi,x2) ^ p{y\xi,x2)p{y2\y, X2), (l) 

i.e., y2 is independent of xi conditioned on y and X2- 

Definition 3: A (2"^o, 2"^i, n) code consists of the fol- 
lowing: 

• Two message sets: >Vo = {1, 2, . . . , 2"-^o} and Wi = 
{1, 2, . . . , 2"^^}. The messages Wq and Wi are inde- 
pendent and uniformly distributed over Wo and W2, 
respectively. 
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Fig. 1. GMAC with one confidential message set 
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Fig. 2. A deterministic GMAC model 



• Two (stochastic) encoders, one at user 1 : Wo x Wi 
X", which maps each message pair {wo,wi) G Wq x Wi 
to a codeword x" G X"; the other at user 2: Wq ^ ^"2', 
which maps each message Wq G Wo to a codeword £ 
X^; 

• One decoder at the destination: y" Wo x Wi, 
which maps a received sequence y" to a message pair 
(wo, wi) € Wo X Wi. 

Note that although user 2 can receive channel outputs (see 
Fig-ID. it is only a passive listener in that its encoding function 
is not affected by the received outputs. However, since its 
outputs contain the confidential message Wi sent by user 1, it 
may extract Wi from its outputs. We assume that user 1 treats 
user 2 as a wire-tapper, and wishes to keep it as ignorant of 
Wi as possible. The secrecy level of Wi at user 2 is measured 
by the following equivocation rate: 

^H{Wi\Y2",XS,Wo). (2) 

The larger the equivocation rate, the higher the level of secrecy. 

A rate-equivocation triple {Rq, Ri, Ri^e) is achievable if 
there exists a sequence of (2"^" , 2"^^ , n) codes with the 

(n) 

average error probability Pe -^0 as n goes to infinity and 
with the equivocation rate i?i e satisfying 

R,.e< lim -H{Wi\Y2",XJ,\Wo). (3) 

n — >oo Ti 



The rate-equivocation triple (Rq, Ri, Ri e) indicates that the 
rate pair (i?o, Ri) can be achieved at the secrecy level i?i.e . 

The capacity-equivocation region, denoted by is the clo- 
sure of the set that consists of all achievable rate-equivocation 
triples (i?o,i?i,i?i,e)- 

We are interested in the case where perfect secrecy is 
achieved, i.e., user 2 does not get any information about the 
confidential message that user 1 sends to the destination. This 
happens if R^ = 

Definition 4: The secrecy capacity region Cs is the region 
that includes all achievable rate pairs (_Ro, Ri) such that R^ = 
Ri, i.e., 

= {(i?o,i?i):(i?o,i?i,i?i)G"^}. (4) 
Definition 5: For a given rate Rq, the secrecy capacity is 
the maximum achievable rate i?i with the confidential message 
perfectly hidden from user 2, i.e.. 



C.(i?o) 



For the GMAC with one confidential message set, inner and 
outer bounds on the capacity-equivocation region were given 
in [4]. In particular, the exact secrecy capacity region was es- 
tablished. For the degraded GMAC, the capacity-equivocation 
region was established, which is given in the following lemma. 
This lemma is useful to study binary and Gaussian GMACs. 

Lemma 1: ([4]) For the degraded GMAC with one con- 
fidential message set as in Definition |2] the capacity- 
equivocation region is given by 

<^'^= y 

Piq, X2)p{xi\q) 

p{y\xi,x2)p{y2\y,x2) 

{Ro, Ri,Re) ■ 

Ro > 0, i?i > 0, (6) 
Ri<I{Xi;Y\X2,Q), 
R^ + Ri<I{Xi,X2;Y), 

0<Re< Rl, 

Re < IiXi;Y\X2,Q) - I{Xi;Y2\X2,Q), 
^ Ro + Re<I{Xi,X2;Y)-I{Xi;Y2\X2,Q) , 

where Q is bounded in cardinality by | Q| < jA^i | • | A2I + 1. 

III. A Simple Example 

In this section, we consider a deterministic discrete mem- 
oryless GMAC model with one confidential message set. 
We obtain the capacity-equivocation region and the secrecy 
capacity region for this channel. 

Consider a binary channel with all channel inputs and 
outputs having alphabets {0, 1}. The MAC from the two 
users to the destination is a binary multiplier channel, and the 
channel from user 1 to user 2 is a bias channel. The channel 
input-output relationship (see Fig. |2]i is given by 



Y = Xi- X2, 



Y2 = 



1, ifXi<X2; 
0, ifXi>X2. 



(7) 



The capacity-equivocation region of the example channel 
given in (IT) is: 



{{Rq, Ri, Re) '■ Ro + -Rl ^ li Re = ^l}- 



(8) 



The capacity-equivocation region implies that the secrecy 
capacity region of this channel is: 



max 



R^ 



(5) 



{{Ro,Ri) ■.Ro + Ri< 1}. 



(9) 
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Fig. 3. Secrecy capacity region of a deterministic GMAC 



Note that the region (|9]l (see Fig. [3]) coincides with the capacity 
region of the binary multiplier MAC given in [7]. 

To show that perfect secrecy can be achieved for all points 
in the region (|9]), we first show that perfect secrecy can be 
achieved for the two corner points. It is trivial that perfect 
secrecy can be achieved for the corner point (i?o = 1, = 
0), i.e., i?e = is achievable at this point. For the other 
corner point (i?o = 0, i?i = 1), perfect secrecy is achieved by 
sending {xi =0,X2 ^ 1) for Wi = and (.ti = 1,X2 = 1) 
for Wi — 1. When either of these two codewords is trans- 
mitted, user 2 always gets output Y2 ~ I, and hence cannot 
determine whether Wi = or Wi = 1 is sent. Therefore, 
perfect secrecy is achieved. By time-sharing between these 
two corner points, perfect secrecy can be achieved for the 
entire region. Note that since the region (|8]l is the best possible 
rate-equivocation region that can be achieved, it is hence the 
capacity-equivocation region (|8]i. 

Remark 1: The deterministic GMAC defined in (|7]i is 
a nondegraded channel. We hence obtain the capacity- 
equivocation region for a nondegraded channel. 

IV. The Binary GMAC with One Confidential 
Message Set 

In this section, we first follow [8] to introduce notation 
and useful lemmas for binary channels. We then introduce 
the binary GMAC model we study and present the capacity- 
equivocation region for this channel. 

We first define the following operation: 

a*b-~a{l-b) + {l-a)b forO<a,6<l. (10) 

We then define the following entropy function 

, I -aloga — (1 — a) log(l — a), if < a < 1; 
h(a) := < 

^ ^ 1 0, if a = or 1. 

(11) 

Note that the function h{a) is one-to-one for < a < 1/2. The 
inverse of the entropy function is limited to h~^{c) e [0, 1/2]. 

Lemma 2: ([8]) The function f{u) — h{p * h^^{u)),0 < 
u < 1 (where p S (0,1/2] is a fixed parameter) is strictly 
convex in u. 

The following useful lemma is a binary version of the 
entropy power inequality. 
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Fig. 4. A degraded binary example GMAC 



Lemma 3: ([8]) Consider two binary random vectors X" 
and F". Let > nv. Let 



Yi — Xi 



for i = 1, 



(12) 



where Z" is a binary random vector with i.i.d. components and 
Zi has distribution PriZi = 1) = po where < po < 1/2. 
The vectors X" and F" can be viewed as inputs and outputs 
of a binary symmetric channel (BSC) with the crossover 
probability po. Then, 



(13) 



with equality if and only if X" has independent components, 
and H{Xi) = v for i ~ 1, 2, . . . ,n. 

We now consider a discrete memoryless binary GMAC 
model with all inputs and outputs having the binary alphabet 
set {0, 1}. The channel input-output relationship (see Fig. |4| 
at each time instant satisfies 



Yi — Xii-X' 



2,i, 



Y2,^=Y,®Z., 



2.i 



for i = 1, 



.,71 (14) 



where Z2 is a binary random vector with i.i.d. components 
and Z2^i has distribution Pr{Z2,i = 1) = p where Q < p < 
1/2. Note that the MAC channel from {Xi,X2) to F is a 
binary multiplier channel. It is clear that this GMAC channel 
is degraded, and the channel outputs Y and Y2 can be viewed 
as the input and output of a discrete memoryless BSC with 
the crossover probability p. 

We have the following theorem on the capacity-equivocation 
region. 

Theorem 1: For the binary GMAC with one confidential 
message set defined in ( fT4b . the capacity-equivocation region 
is 

{Ro, Rl, Re) ■ 
Ro > 0, i?i > 0, 
Rl < h{a), 
Ro + Ri<l, 

0<Re< Rl, 

Re < h{a) + h[p) — h{p * a), 
Rn + Re<l + h{p) - h{p * a) ^ 
The proof of Theorem [T] is given at the end of this section. 
Corollary 1: The secrecy capacity region of the binary 
GMAC with one confidential message set defined in (fl4] l is 

{Ro, Rl) : 
nB _ II J i?o > 0, i?i > 0, 

Rl < h{a) + h{p) — h{p * a), 
i?o + i?i < 1 + h{p) - h{p * a) 



u 



0<Q<, 



(15) 



u 



(16) 
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The secrecy capacity as a function of Rq is given by 

C^{Ro) = h{a*) + h{p)-h{p*a*) (17) 
where a* is determined by the following equation 

i?o = 1 - (18) 

Remark 2: The BSC crossover probability parameter p 
determines how noisy the channel from user 1 to user 2 
is compared to the channel from user 1 to the destination. 
When p = 0, user 2 has the same channel from user 1 as 
the destination, and hence no secrecy can be achieved. As 
p increases, user 2 has a noisier channel from user 1 than 
the destination, and hence higher secrecy can be achieved. As 
p — ^, user 2 is totally confused by confidential messages 
sent by user 1, and perfect secrecy is achieved. 

Fig. |5] plots the secrecy capacity as a function of Rq for four 
values of p. These lines of C^{Ro) also serves as boundaries 
of the secrecy capacity regions with the vertical axis being 
viewed as It is clear from Fig. |5] that as p increases, 
the secrecy capacity region enlarges, because user 2 is further 
confused about the confidential message sent by user 1. 

Remark 3: From the achievability proof of Theorem [T| 
(given at the end of this section), it can be seen that the 
optimal scheme to achieve the secrecy capacity region uses 
superposition encoding. To achieve the secrecy capacity cor- 
responding to different values of Rq, different values of the 
superposition parameter a needs to be chosen to generate the 
codebook. However, if the secrecy constraint is not considered, 
the capacity region of the binary multipUer MAC can be 
achieved by a time sharing scheme and superposition encoding 
is not necessary. 

Fig. |6] plots the secrecy capacity as a function of i?o 
(indicated by the solid line) and compares it with the secrecy 
rate achieved by the time sharing scheme (indicated by the 
dashed line). The figure demonstrates that the time sharing 
scheme is strictly suboptimal to provide the secrecy capacity 



region. As we commented in Remark |3] although the time 
sharing scheme is optimal to achieve the capacity region of 
the binary multiplier MAC, it is not optimal to achieve the 
secrecy capacity region of the binary GMAC, where secrecy 
is also considered as a performance criterion. 

Proof of Theorem Q] 

Proof of Achievability: 

We apply Lemma [T] to prove that the region (flSl l is achiev- 
able. Let Q and X' be two binary random variables with 
alphabet {0, 1}, and assume that Q is independent of X' . We 
choose the following joint distribution: 

Pr{Q = 0} = i; Pr{X' = l} = a, < a < i; 
Pr{X2 = l} = l; Xi^Q®X'. 

We now compute the mutual information terms in (|6]) given 
in Lemma [U based on the preceding joint distribution. 

Ri < IiXi;Y\X2, Q) = H{Y\X2, Q) 
= Pr{Q^Q}H{Y\X2 = 1,Q = 0) 

+ Pr{Q = 1}H{Y\X2 = 1, Q = 1) 
= ^(a), 

Ro + Ri<I{Xi,X2:Y)=H{Y) = l, 

Re < I{Xi;Y\X2,Q) - I{Xi-Y2\X2,Q) 
= h{a) - {H{Y2\X2,Q) - H{Y2\X,,X2)) 
= h{a) - [Pr{Q = 0}H{Y2\X2 = 1,0 = 0) 
+ Pr{Q = 1}H{Y2\X2 = 1, Q = 1) 

- Pr{Xi = 0}H{Y2\X2 = 1, = 0) 

- Pr{Xi = 1}H{Y2\X2 = 1, Xi = 1)] 
= h(a) — [h{a * p) — h{p)] 

= h{a) + h{p) — h{a * p), 
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+ Ri < I{Xi,X2;Y) - I{Xi:Y2\X2,Q) 
= 1 — [h{a * p) — h{p)] 
= 1 + h{p) — h{a * p). 

Proof of the Converse: 

We consider a sequence of (2"-"o,2"-"i,n) codes for the 
degraded GMAC with one confidential message set with 
Pe ^ 0. Then the probability distribution on Wq x Wi x 
X X X is given by 

p(wo,Wi,a;^a;'2\y",?/2) 

n 

= P{wo)p{wi)p{x1\wQ, Wi)p{x2\wo) y2,i\^l,i, X2,i) 

i=\ 

From [9, Sec. 4.2], we have the following bounds: 

n 
1=1 

(19) 

where Q, := (r*-\ Xj", W^), and (5„ ^ if Pi"^ 0. 
ni?o + nRie 

< I{Wo;Y")+nRi^,,+n5„ 



= HXu^, X2,r; Y,) - /(Xi,,; Y2,^\Q^, X2^^) + n5„ 
1=1 

ni?i < I{X-^]Y'^\Wa,X-^)+n5n 

n 

= Y HXiy, Y,\X2,^,Q^) + nSn 

4=1 

nRo + nRi < I{Wo, W^i; F") + nS„ 

n 

= J2HXl,^,X2^^■,Y,)+nSn. 



(20) 



(21) 



(22) 



We now further derive the bounds (fT9]l-(l22]i for the binary 
GMAC. From (EB, we obtain 

nRi < I{X^; Y"\X^, Wo) + n6n - (^"IX^", Wo) + n6n 

(23) 

where we have used the deterministic property of the GMAC, 
which implies X^, W^o) = 0. 

Since {Yi,l < i < n} are binary random variables, 
HiY,) < 1 for 1 < i < n. Hence 



< Wo) < J2 ^(^0 ^ 



(24) 



It is clear that there exists a parameter a E [0, 1/2] such that 
H{Y"\X^, Wo) = nh{a). (25) 
Substituting the preceding equation into ( |23] l. we obtain 

nRi < nh{a) + ri(5„. (26) 



(27) 



(28) 



From (|22] |. we obtain 

nRo + nRi < I{Wo,Wi;Y") + n5„ < H{Y") + n5„ 
< n + n6n ■ 
From (fT9] l. we obtain 

< /(Xr; M^o) - I{X^;Y^"\X^, Wo) + nS^ 

= H{Y^\X^, Wo) - H{Y^\X^, Wo) 
+ H(Y^\X^,X-:i,Wo)+n5r, 

nh{a)-H{Y^\Xl^,Wo) 
+ h{y;'\y^, XI, X^, Wo) + nS^ 

nh{a) ~ H{Y^\X^, Wo) + H{Y^\Y'') + nS^ 

= nh{a) - H{Y^\X^, Wo) + nh{p) + nS^ 

In the preceding bound, the first term in (a) follows from 
(IZSl l. the third term in (a) follows from the fact that is a 
deterministic function of and the third term in [h) 

follows from the fact that Y2 is conditionally independent of 
everything else given F". 

Since ZJ]; in (Ell is independent of VKo,X^ and F", we 
apply Lemma |3] to bound the term iJ(Kf|^^, Wo). 

h{y:^\xi^,Wo) 

= J^H{Y^\Xl^^x'i,Wo^wo) 

■H{Y--\Xl^ = x^,Wo=woy 



nh (p * /i 



(a) 

> E 

> nh [ p * h 



E 



H(Y''\X^' =x^,Wo^wo) 



nh [ p * h 



nh [ p * h ^ 



H{Y"\X^,Wo) 



nh{a) 



— nh(p * a) 

(29) 

where (a) follows from Lemma [3] (6) follows from Lemma 
|2] and Jensen's inequality, and (c) follows from dZSl l. 
Substituting ( [29l ) into ( |28] ), we obtain 

nRi_e < nh{a) + nh{p) — * a) + 7i(5n . (30) 



From ( I20b . we obtain 

nRo + nRi,e 

</(M^o;>^") + ni?i,e 

< /(Wo; F") + /(Xi"; F"|X2", Wo) 
-IiXl';Y^^\X^,Wo) + n5r, 

< /(Wo, F") + I{X^; Y"\X^, Wo) 
~I{X^;Y2"\X^,Wo) + n6n 

= /(Wo, F") - I{X^;Y^'\X^2\ Wo) + n<5„ 

= H(F") - /(X^; F2"|X2", Wo) + nSn 

< n + nh(p) — nh{p * a) + nSn 



(31) 
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where (a) follows from ( fT9] l, (6) follows from the chain rule 
and nonnegativity of mutual information, and (c) follows from 
the steps in deriving Ri^e- 

In summary, (|26] |. (|27] |. dSOl l and dSTT i constitute the converse 
proof for Theorem [T] 

V. Gaussian GMAC with One Confidential 
Message Set 

In this section, we study the Gaussian GMAC with one 
confidential message set, where the channel outputs at the 
destination and user 2 are corrupted by additive Gaussian noise 
terms. We assume that the channel is discrete and memoryless, 
and that the channel input-output relationship at each time 
instant is given by 



Y2.i ~ Xi i 



' ^2,1 + Zi 
' ^2 i + Z^.i 



(32) 



where Z" and are independent zero mean Gaussian 
random vectors with i.i.d. components. We assume that Zi and 
Z^.i have variances N and N^, respectively, where N < N2- 
The channel input sequences X" and are subject to the 
average power constraints Pi and P2, respectively, i.e.. 



and 



1 

i=l 



(33) 



The following theorem states the capacity-equivocation re- 
gion for the Gaussian GMAC with one confidential message 
set. 

Theorem 2: For the Gaussian GMAC with one confidential 
message set given in (|32] |. the capacity-equivocation region is 
given by 

{Ro, Ri, Re) : 
Ro > 0, i?i > 0, 
i?i<ilog(l + ^), 

i?0 + i?l < i log (1 
0<Re < Rl, 
Re < il0g(l + ^ 



u 

0<a<l 



Pi+P2+2VaPiP2 

N 



R0 + Re< llogfl 



-ilog 1 



-ilog(l + ^ 

Pl+P2+2v/fiPiP2 

N 

aPl \ 
N2 J 

(34) 

where a = 1 — a indicating the correlation between the inputs 
from users 1 and 2. 

The proof of Theorem |2] is given at the end of this section. 

Corollary 2: The secrecy capacity region of the Gaussian 
GMAC with one confidential message set given in ( |32] | is 

{Ro, Rl) ■ 
Ro >0,Ri> 0, 

i?i<ilog(l + ^)-ilog(l + ^ 

i?o + i?i < 5 log (1 

-ilog(l + ^ 

(35) 



u 

0<Q<1 



2 ' N-: 

Pl+P2+2x/aPlP2 

N 



User 1 -> Destination SNR: 15dB 
User 2 -> Destination SNR: lOdB 



Boundary of Gaussian 
MAC Capacity 
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Fig. 7. Secrecy capacity regions of Gaussian GMACs with one confidential 
message set and capacity region of con'esponding Gaussian MAC 



The secrecy capacity as a function of Ro is 



Cf (i?o) 



Pi 

N 



ifi?o<iiogii±a±iv 

ilog(l + H^)-llog(l + ^) 

ifi?o>iiog^i±a±iv 



(36) 



where a* is determined by the following equation 



1, Pi+P2 + 2^{l-a*)PiP2 

Ro ^ - log 

" 2 ^ a*Pi+N 



N 



(37) 



Fig. Q plots the secrecy capacity Cf{Ro) (solid lines) of 
Gaussian GMACs with one confidential message set for three 
user 1-to-user 2 SNR values. The lines of Cf{Ro) also serve 
■as boundaries of the secrecy capacity regions if we view the 
vertical axis as Ri. It can be seen that as user 1-to-user 2 
SNR decreases, which implies that the noise level at user 2 
increases, user 2 gets more confused about the confidential 
message sent by user 1. Thus the secrecy capacity region 
enlarges. As this SNR approaches zero, the secrecy capacity 
region approaches the entire capacity region of the Gaussian 
MAC, which means that perfect secrecy is achieved for almost 
all points in the capacity region of the MAC. 

Proof of Theorem \2\ 

We first note the following useful lemma. 

Lemma 4: ([4]) The capacity-equivocation region of 
GMACs with one confidential message set depends only 
on the marginal channel transition probability distributions 
piy\xi,X2) and p{y2\xi,X2). 

To show Theorem 12] we first note that the Gaussian GMAC 
defined in (|32] | is not physically degraded according to Def- 
inition |2] However, it has the same marginal distributions 
p{y\xi,X2) and p{y2\xi,X2) as the following physically de- 
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graded Gaussian GMAC: 



Yi — Xi,i + X2,i + Zi 
Y2A = + X2.i + Zi + z\ 



(38) 



where Z" is the same as in ( |32] |. The random vector Z'" 
is independent of Z", and has i.i.d. components with each 
component having the distribution A/'(0, N2 — N). According 
to Lemma |4] it is sufficient to prove Theorem |2] for the 
physically degraded Gaussian GMAC defined in dSSl ). 
Proof of the Achievability: 

The achievability follows by computing the mutual informa- 
tion terms in Lemma [T] with the following joint distribution; 



Q = 0, X2^ AA(0, P2) 

X[ ^ 7V(0, aPi), and X[ is independent of X2 

Xi = ^ ^r"^2 + X[ 



(39) 



Proof of the Converse: 

We apply the bounds (fT9]l-(l22Tl. and further derive these 
bounds for the degraded Gaussian GMAC. 

From (l2Tl i. we obtain 

n 

nR^<J2I{XlX^Y,\X2a,Q^) + nS„ 

n 

= ^ h{Y,\X2,^, Q,) - h{Y,\Xi,,, X2,,, Q^) + nSn 

1=1 

n 

= h{Y,\X2,^, Q,) - /i(ZdXi,„ Q.) + n,5„ 

" 1 
= ^ /i(i;|X2,^, Q^) - - log27re7V + n(5„ 



(40) 



For the first term in the preceding inequality, we have 

71. 

Y,h{Y,\X2^,,Qi) 

i=l 

n 

= h{Xi^i + X2^i + Zi\X2^i, Qi) 

i=l 
n 

= Y,HXu^ + Z^\X2^^,Q^) 
i=l 

n ^1 

< KXi^; + Z,)<Y.2 log2^e(EX2 , + N) 

i=l i=l 

n 

< -log27re(Pi +7V) 

where (a) follows from Jensen's inequality. 



(41) 



On the other hand, 

n 

1=1 

n 

> Y ^(^1.* + ^2.^ + Z^|Xl,„ X2,^, Q^) ^^^^ 
i=l 

= - log 2'KeN . 
2 ^ 

Combining ( 1411 1 and (|42] |. we establish that there exists some 
a e [0, 1] such that 

n 

^ h{Y,\X2,^, Q,) = 5 log2^e(aPi + N) . (43) 
We hence obtain the bound for i?i 



1 

nRi < - log 27re(Q:Pi + N) - - log 27reiV + n(5„ 

" 1 A Ct-Pl \ r 



(44) 



For the term J^^^i h(Yi\X2,i,Qi), we can also derive the 
following bound: 

n 

J2HY^\X2,^,Q^) 
i=l 

n 

= YHXi. + Z,\X2^,,Q,) 
1=1 

" 1 

< I] Ex,,,,Q, - log2^eVar(Xi^, + Z,|X2^„ Q,) 

i=l 
('^) 1 

< 2J 2 log2^eEx,,„Q,Var(Xi^, + Z,|X2,„ Q.) 
i=i 

" 1 

= ^ - log27re (Ex,,„Q.Var(Xi,,|X2,„Q.) + TV) 

i=l 
" 1 

= ^ - log27re (E(X2 J - Ex,^„Q,E\X^,,\X2,^, Q.) + 7V) 

i=l 

< ^log2.eflf]E(X?,,) 

V" j=i 



- -Ex,,,Q,E^(Xi,,|X2,„g,) + ^j 

< |log27re (p, - iEx,,,Q.E2(Xi,,|X2,„Q,) + 



where (a) and (fo) follows from Jensen's inequality. 
Using (I43I 1. we have 

qPi + TV < Pi - Iex, ,,q,E2(Xi,,|X2,„Q., 
n ■ 

1 9, 



-Ea-,,,,q,E^(Xi,,|X2,„Q,0 <aA 



(45) 



AT 



(46) 
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From (|221 >, we obtain 

n 

nRo + nRi<Y^ /(Xi,^, Xa,,:; Y,) + nS^ 

i=l 
n 

= KYi) - I{Y^\X^.„X2^i) + n(5„ (47) 

4=1 

n 

= ^ - ^ log 27re7V + n(5„ 

i=l 

For the first term in tlie preceding inequality, we obtain 

n 

n 

= HXr + Xi,, + Z,) 

i=l 
n 

<Y.2 ^^^^1^' + ^2,.)' + N) 

i=l 

< I log 2^e ( - I] E(Xi,, + X2,,)' + n\ 

1 " 1 " \ 

+ ~ II ^^2,4 + - H 2E(Xi,,X2,0 + iV 

i=l i=l / 

< I log 27re + ^2 + ^ ^ 2E(Xi,,X2,.) + ivj 



Hence, 



< -log27re P1+P2 



- 2E(X2,,E(Xi,,|X2,„ Q,)) + TV 



< -log27re Pi +P2 



Y ^^Xlr ■ EE2(Xi,i|X2,i, Qi) + n\ 



< |log2^e(^Pi+P2 



A 



^Eex|^.) (^if]EE2(XM|X2„go) 
< ^ log 27re (Pi + P2 + 2v/aPiP2 + iv) 



< -log2^e (Pi+P2 + 2v/aPiP2 + ^ 

77, 

— — log 2'neN + n5n 
= 2 log 1 + ^ ) +n<5„ 



(49) 



From ( fT9b , we obtain 



< E /(Xi,,; y,|X2,„ 0.) - /(Xi,,; ^2,41^2,4, 0^) + n<J. 



1=1 
n _ 



■ log 1 



aPi 



i=l 



- log 27reiV2 + n(5„ 



(50) 



In the preceding bound, (a) follows from Jensen's inequality, 
[h) and (c) follows from Cauchy-Schwarz inequality, and [d) 
follows from ( |46] |. 



To bound the term f^{Y2.i\X2.i, Qi) in ( l50l l. we first 

derive the following bound. Since Z'^ is independent of Yi 
given X2,i and Qi, by entropy power inequality, we obtain 

2'2h{Yi+Zl\X2,^=X2,i,Qi=q,) 

^ 22My.l^2.,==r^2,.,Q.=9.) _^ 27re(7V2 - TV) 
We then obtain 

h{Y,+Z'^\X2,,^X2,^,Q^^q^) 

> i log (2^h{Y,\X2,,=X2,,,Q,=g,) ^ 2Tie{N2 ~ iV)) 

Taking the expectation on both sides of the preceding equation, 
we obtain 

m{Y^ + Z'i\X2,^=X2,^.Q^ = q^) 

> iElog(22''(^'l^^.-^^-'3'=?') +27re(Ar2 -AT)^ 

> i log (22E'^(^-l^^"=-=-«-=«') + 2^e(TV2 - TV)) 
= i log (2^HY,\x,,,.Q,) + 2^e(TV2 _ N)^ 

where (a) follows from Jensen's inequality and the fact that 
log(2^ + c) is a convex function. 

Summing over the index i, the preceding inequality becomes 



J2HY^ + Zl\X2.^,Qi) 

i=\ 

1 " 

> i ^log {2^HY.\x.,.,Q.) + 27re(TV2 - TV) 



^ log Er.i My.|X2.,Q0 + 27re(TV2 - TV) 
= ^ log (27re(aPi + TV) + 27re(TV2 - TV)) 



log (27re(aPi +TV2)) 
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where (a) follows from Jensen's inequality, and (6) follows 
from ( |46] |. 

Applying the preceding bound to the term 

Yh=i HY2,i\^2,i, Qi), we obtain 



J2 h(Y2^X2,^, Q^) = ^ h{Y, + Z[\X2,,, Qi) 



i=l 



i=l 

n 



> - log (27re(aPi + N2)) 



Substituting the preceding bound into ( I50b . we obtain 

aPi 



nRi,e < log I 1 



- log (27re(aPi + N2)) + - log 27reiV2 + n5. 



< 2 log I 1 



aPi \ n 



N 



aPi 



From (|20] l, we obtain 

nRo + nRie 

n 

< J2 I{Xl^^,X2^^;Yi) - I{Xiy, Y2.^\X2,^, Q.) + uS, 



i=l 



< — log 1 H 

-2^1 N 



- h{Y2,^\X2^^, Q^) + ^ log 2TTeN2 + 71(5„ 



i=l 



^2^°S [1 + ^ 

- - log (27re(aPi + N2)) + -log 2'KeN2 + n5„ 



< — log 1 H 

n aPi 
- -log(l + —) + n6n, 



(53) 
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which completes the proof. 



VI. Conclusions 



We have established the capacity-equivocation region for a 
binary example GMAC and the Gaussian GMAC with one 
confidential message set. For the binary GMAC, we have 
shown that the time-sharing scheme is strictly suboptimal to 
achieve the secrecy capacity, although it is optimal to achieve 
the capacity without the secrecy constraint. We have also 
found that the capacity-equivocation region of GMACs with 
one confidential message set depends only on the marginal 
channels p{y\xi,X2) and p(y2|2;i, •'2;2)- Based on this observa- 
tion, we have obtained the capacity-equivocation region for the 
Gaussian GMAC (not necessarily physically degraded) with 
one confidential message set. 
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